Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/98dab8-7b24-49f3-a36f-73a157a2b99f/1/bHO9JP2DCIa_otKWFBbSGF3jN3I.mft
File: bHO9JP2DCIa_otKWFBbSGF3jN3I.mft (raw, json)
Hash identifier: d198V4sI3O3w1p3WCpLFC4oUn5fWr+3q1PNhF4lmyAc=
Subject key identifier: 33:5A:5F:52:E6:70:51:B1:39:A0:D9:A2:F8:D3:F2:43:28:11:28:5D
Authority key identifier: 6C:73:BD:24:FD:83:08:86:BF:A2:D2:96:14:16:D2:18:5D:E3:37:72
Certificate issuer: /CN=6c73bd24fd830886bfa2d2961416d2185de33772
Certificate serial: 0197B6A176AB786C2C300C8B1555D380DC68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bHO9JP2DCIa_otKWFBbSGF3jN3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/98dab8-7b24-49f3-a36f-73a157a2b99f/1/bHO9JP2DCIa_otKWFBbSGF3jN3I.mft
Manifest number: 0901
Signing time: Sat 28 Jun 2025 13:02:04 +0000
Manifest this update: Sat 28 Jun 2025 13:02:04 +0000
Manifest next update: Sun 29 Jun 2025 13:02:04 +0000
Files and hashes: 1: bHO9JP2DCIa_otKWFBbSGF3jN3I.crl (hash: 4/kIJMKHmP+pI2fM1CN4SGfjns4a8BBbUgHJYbjjkSA=)
2: qHEAWZ6N3iBzcK7IIzIjqot58Rk.roa (hash: n8u6jtIG9RsDk/UjBbBpLB8puiC2i8ky96Vt7ctj0eY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/98dab8-7b24-49f3-a36f-73a157a2b99f/1/bHO9JP2DCIa_otKWFBbSGF3jN3I.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/98dab8-7b24-49f3-a36f-73a157a2b99f/1/bHO9JP2DCIa_otKWFBbSGF3jN3I.mft
rsync://rpki.ripe.net/repository/DEFAULT/bHO9JP2DCIa_otKWFBbSGF3jN3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:76:ab:78:6c:2c:30:0c:8b:15:55:d3:80:dc:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c73bd24fd830886bfa2d2961416d2185de33772
Validity
Not Before: Jun 28 13:02:04 2025 GMT
Not After : Jun 29 13:02:04 2025 GMT
Subject: CN=335a5f52e67051b139a0d9a2f8d3f2432811285d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c7:21:1d:00:3b:8e:bc:45:37:82:ac:6b:1a:
9f:44:38:4c:21:e0:a1:cc:65:f9:b4:3c:07:da:ed:
34:ee:6f:46:b7:fe:4d:3b:ae:9e:3e:00:42:88:a4:
46:49:01:2e:ed:59:49:12:ef:05:d4:67:cf:b9:9a:
95:74:0b:89:3d:38:ef:57:88:38:a9:af:00:da:78:
b5:f9:72:0e:4c:a4:7a:af:b7:50:23:a0:b7:77:75:
a8:4c:2f:d3:1a:23:f6:1e:a0:60:14:72:a2:86:4f:
59:9c:70:7d:af:ba:a1:a7:46:d4:2e:d7:9c:44:2c:
84:52:42:d5:3b:b8:9d:36:ed:9b:60:cf:f5:d9:cf:
b5:ae:10:aa:b2:bb:cf:9c:c2:c8:f9:f5:64:73:55:
f6:c3:2e:e7:57:3c:06:7f:ab:5e:38:ad:4c:19:40:
84:0e:d2:a0:57:c9:48:cd:87:c1:5a:27:15:b0:a2:
85:f0:77:7f:ea:ea:5d:29:4e:d6:a7:9f:63:aa:e3:
e8:c2:09:9d:1d:a8:93:d9:d1:9f:27:72:28:45:6f:
e0:46:08:8f:c9:e0:fa:af:30:f2:1e:d3:02:45:48:
bc:21:a6:66:33:95:3f:e8:bb:eb:13:e5:24:b2:0e:
91:f9:7c:e2:56:ba:29:e2:dc:fb:bd:5a:c2:5f:e1:
a1:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:5A:5F:52:E6:70:51:B1:39:A0:D9:A2:F8:D3:F2:43:28:11:28:5D
X509v3 Authority Key Identifier:
keyid:6C:73:BD:24:FD:83:08:86:BF:A2:D2:96:14:16:D2:18:5D:E3:37:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bHO9JP2DCIa_otKWFBbSGF3jN3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/98dab8-7b24-49f3-a36f-73a157a2b99f/1/bHO9JP2DCIa_otKWFBbSGF3jN3I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/98dab8-7b24-49f3-a36f-73a157a2b99f/1/bHO9JP2DCIa_otKWFBbSGF3jN3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:2b:2e:a6:ea:8a:63:20:29:fd:d3:75:5d:7d:17:3c:1c:6e:
49:c1:61:b2:1a:f1:27:bf:54:0c:78:95:2a:a7:7a:5c:c4:cd:
f1:66:8a:ec:ab:bf:54:76:60:44:20:b5:f3:b2:c7:57:b2:0c:
c2:14:e1:08:47:16:1f:e8:63:60:7a:17:ec:d5:61:8f:26:f1:
77:db:7e:af:a3:0c:9f:15:dd:f0:87:c3:5e:96:b8:4e:6d:c2:
6a:39:93:cd:49:eb:cf:10:40:e3:82:4b:6d:a8:ad:7d:89:ac:
40:89:72:99:59:80:4f:b9:cb:e5:6f:8a:80:8f:63:b7:a4:5b:
fb:a0:56:8c:e2:b3:90:e7:23:8f:30:86:13:dc:51:d4:b1:92:
ab:0c:df:20:d1:ab:b5:7f:fb:e2:a4:69:88:1a:38:b1:83:be:
90:b2:96:39:1c:cc:5b:58:ac:ec:f0:65:c0:f5:e0:31:87:dc:
f2:97:74:88:f0:b6:6a:20:d2:0d:65:47:20:c0:f4:ef:e4:6f:
b6:29:8a:1f:e6:51:c3:69:ef:63:07:34:8e:c5:95:1a:9b:fe:
b9:28:52:41:75:36:11:e8:b2:0d:3e:80:bc:26:51:89:38:00:
0d:6f:1f:d0:81:ed:52:97:b8:d5:1b:7c:96:84:47:2b:b8:80:
e5:8e:a2:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:02:04 2025 by rpki-client